aws-privateca-issuer.advisories.yaml

schema-version: 2.0.2

package:
  name: aws-privateca-issuer

advisories:
  - id: CGA-2gwm-p8p6-4v95
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T13:01:05Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-privateca-issuer
            componentID: 1a69b2ffc0b2e2ef
            componentName: stdlib
            componentVersion: go1.23.5
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2025-02-09T07:29:33Z
        type: fixed
        data:
          fixed-version: 1.4.0-r4

  - id: CGA-7cpp-3vpr-388r
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T11:15:59Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-privateca-issuer
            componentID: 871f7c5b1ab4cde3
            componentName: golang.org/x/net
            componentVersion: v0.26.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-12-19T19:41:42Z
        type: fixed
        data:
          fixed-version: 1.4.0-r2

  - id: CGA-c6pv-6mjw-h66f
    aliases:
      - CVE-2024-45336
      - GHSA-7wrw-r4p8-38rx
    events:
      - timestamp: 2025-01-31T22:08:25Z
        type: fixed
        data:
          fixed-version: 1.4.0-r3

  - id: CGA-jx3x-wc5f-q2h8
    aliases:
      - GHSA-r4pg-vg54-wxx4
    events:
      - timestamp: 2024-11-21T07:42:11Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-privateca-issuer
            componentID: 44a4b4e712968b93
            componentName: github.com/cert-manager/cert-manager
            componentVersion: v1.14.5
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-11-21T11:29:24Z
        type: fixed
        data:
          fixed-version: 1.4.0-r1

  - id: CGA-w2hv-p2mr-9fgx
    aliases:
      - CVE-2024-45341
      - GHSA-3f6r-qh9c-x6mm
    events:
      - timestamp: 2025-01-31T22:08:24Z
        type: fixed
        data:
          fixed-version: 1.4.0-r3